Lucene search
+L

2 matches found

osv_ghsa
osv_ghsa
•added 2019/06/05 2:10 p.m.•20 views

GHSA-XF5P-87CH-GXW2 Marked ReDoS due to email addresses being evaluated in quadratic time

Versions of marked from 0.3.14 until 0.6.2 are vulnerable to Regular Expression Denial of Service. Email addresses may be evaluated in quadratic time, allowing attackers to potentially crash the node process due to resource exhaustion. Recommendation Upgrade to version 0.6.2 or later...

5.3CVSS5.8AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2019/06/05 12:00 a.m.•3 views

PT-2019-20081

Name of the Vulnerable Software and Affected Versions marked versions 0.3.14 through 0.6.1 Description The issue allows attackers to potentially crash the node process due to resource exhaustion by evaluating email addresses in quadratic time. Recommendations For marked versions 0.3.14 through...

5.3CVSS5.8AI score
SaveExploits0References7
Rows per page
Query Builder